policy: add a decapod app for policies

templates/argo-cd/create-app-wftpl.yaml

@@ -101,3 +101,33 @@ spec:
           - {name: namespace, value: "{{item.namespace}}"}
           - {name: target_cluster, value: "{{item.target_cluster}}"}
         withParam: "{{inputs.parameters.list}}"
+
+  - name: argocd-sync-wait
+    inputs:
+      parameters:
+      - name: cluster_id
+      - name: appname
+    container:
+      name: argocd-sync-wait
+      image: harbor.taco-cat.xyz/tks/argocd-cli:v2.2.5
+      command:
+        - /bin/bash
+        - '-c'
+        - |
+          # log into Argo CD server
+          ./argocd login $ARGO_SERVER --plaintext --insecure --username $ARGO_USERNAME \
+          --password $ARGO_PASSWORD
+
+          app_name={{inputs.parameters.cluster_id}}-{{inputs.parameters.appname}}
+
+          # sync app
+          echo "sync app $app_name"
+          ./argocd app sync $app_name
+
+          # wait for sync
+          ./argocd app wait $app_name --sync
+
+      envFrom:
+        - secretRef:
+            name: "decapod-argocd-config"
+    activeDeadlineSeconds: 900

templates/argo-cd/prepare-argocd-wftpl.yaml

@@ -86,6 +86,12 @@ spec:
           if [[ $? != 0 ]]; then
             ./argocd proj create admin-tools --dest "*,*" --src "*" --allow-cluster-resource "*/*"
           fi
+
+          ./argocd proj get policy
+          if [[ $? != 0 ]]; then
+            ./argocd proj create policy --dest "*,*" --src "*" --allow-cluster-resource "*/*"
+          fi
+
       env:
         - name: ARGO_SERVER
           value: '{{workflow.parameters.argo_server}}'

templates/decapod-apps/lma-uniformed-wftpl.yaml

@@ -135,7 +135,6 @@ spec:
                 { "app_group": "lma", "path": "thanos-config", "namespace": "lma", "target_cluster": "" },
                 { "app_group": "lma", "path": "fluentbit", "namespace": "lma", "target_cluster": "" },
                 { "app_group": "lma", "path": "kubernetes-event-exporter", "namespace": "lma", "target_cluster": "" }
-
               ]
         dependencies: [lma-operators]